DCMTK
- Software type
- Software application
- Total vulnerabilities (90 days)
- 8
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/11/2026, DCMTK recorded 8 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of DCMTK and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97059DCMTK through 3.7.0 Heap Over-read via NumberOfFramesCVE-2026-12805OFFIS DCMTK ofxml.cc parseFile heap-based overflowCVE-2026-10194OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflowCVE-2026-5663OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injectionCVE-2025-14841OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-97059DCMTK through 3.7.0 Heap Over-read via NumberOfFrames | Exploitation statusNot exploited | FixYes | Published09/24/2026 | SeverityHigh |
CVE-2026-12805OFFIS DCMTK ofxml.cc parseFile heap-based overflow | Exploitation statusActively exploited | FixYes | Published06/21/2026 | SeverityMedium |
CVE-2026-10194OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow | Exploitation statusNot exploited | FixYes | Published05/31/2026 | SeverityMedium |
CVE-2026-5663OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection | Exploitation statusNot exploited | FixYes | Published04/06/2026 | SeverityMedium |
CVE-2025-14841OFFIS DCMTK dcmqrscp dcmqrdbi.cc startMoveRequest null pointer dereference | Exploitation statusNot exploited | FixYes | Published12/18/2025 | SeverityMedium |
CVE-2025-14607OFFIS DCMTK dcmdata dcbytstr.cc makeDicomByteString memory corruption | Exploitation statusNot exploited | FixYes | Published12/13/2025 | SeverityMedium |
CVE-2022-4981DCMTK dcmqrscp dcmqrcnf.cc readPeerList null pointer dereference | Exploitation statusActively exploited | FixNo | Published10/21/2025 | SeverityMedium |
CVE-2020-36855DCMTK dcmqrscp parseQuota stack-based overflow | Exploitation statusActively exploited | FixNo | Published10/21/2025 | SeverityMedium |
CVE-2025-9732DCMTK dcm2img diybrpxt.h memory corruption | Exploitation statusActively exploited | FixYes | Published08/31/2025 | SeverityMedium |
CVE-2025-2357DCMTK dcmjpls JPEG-LS Decoder memory corruption | Exploitation statusActively exploited | FixYes | Published03/17/2025 | SeverityMedium |
29 Results | Page 1 of 3